Probably a little of both.
I'm personally reducing this surface area with clients in light of recent attacks.
Personally, something like this w.r.t. VC means that incentives will diverge and they lose touch with what it means to be a dev tool.
w.r.t. supply chain, it's probably more of a correlation (related to) that they will eventually have the large companies as enterprise customers who are the real target. Also, once making money becomes the primary driver, other important tasks are deprioritized. I've seen both the tools and their correct usage go to the wayside.
Most abstractly I think the misaligned incentives is what happens. I'm not convinced that VCs get dev tools and don't ruin them.